|
|
#91 (permalink) |
|
Registered User
Fresh Surpasser
Joined in Sep 2003
Lives in Spokane, Washinton
Hosted on SH124
6 posts
Gave thanks: 0
Thanked 1 Time in 1 Post
|
That's where I was. Below is a screenshot of PART of the screen. The rest is 5 score fields and 5 whitelist_from fields
|
|
|
|
|
|
#92 (permalink) |
|
minor deity
Super #1
Joined in Apr 2004
Lives in Georgia
Hosted on XEON
7,364 posts
Gave thanks: 25
Thanked 94 times
|
rewrite header subject is same as TAG... seems spam assassin evolved it's language a little. You're in the right place.
__________________
Proud to be a Surmunity Mod! XEON Make a fundamental difference! My Sites: Curious about Brewing Beer? Join the community! >>>>> Some Change is GOOD! Keep your paycheck! Support the Fair Tax Get into an Art museum Victorian London It's your brain -ON WEB - mybrainhost.com (under development) What SHOULD Government do? Much Less than it Does! |
|
|
|
|
|
#93 (permalink) |
|
Registered User
Fresh Surpasser
Joined in Apr 2004
Lives in Reykjvík, Iceland
19 posts
Gave thanks: 0
Thanked 0 times
|
Only one problem
I use squirrelmail and I can't see a Copy operator on mails, just forward and move.
Am I missing something here? I looked into installing a copy of squirrelmail and it really doesn't look feasible without shell access (althou one could perhaps get past that with making a script and running it with cron) It's been about 2 weeks since the spam flood finally hit me, don't know which online action got me on the lists, been quite spam free for about 21 yeard now with the same email addy. Thanx for a great thread and explanation.
__________________
I am the Barber of Seville Server: xxx.xxx.238.158 Domain: arnists.com |
|
|
|
|
|
#94 (permalink) |
|
minor deity
Super #1
Joined in Apr 2004
Lives in Georgia
Hosted on XEON
7,364 posts
Gave thanks: 25
Thanked 94 times
|
I use hastymail. Easy to install, and super cool.
What usually gets you is someone you've been in contact with gets jammed up with some spyware... bang, your email address and everyone else he's ever sent to, get into the spamsystem... John
__________________
Proud to be a Surmunity Mod! XEON Make a fundamental difference! My Sites: Curious about Brewing Beer? Join the community! >>>>> Some Change is GOOD! Keep your paycheck! Support the Fair Tax Get into an Art museum Victorian London It's your brain -ON WEB - mybrainhost.com (under development) What SHOULD Government do? Much Less than it Does! |
|
|
|
|
|
#95 (permalink) |
|
Registered User
Fresh Surpasser
Joined in Sep 2003
Lives in Spokane, Washinton
Hosted on SH124
6 posts
Gave thanks: 0
Thanked 1 Time in 1 Post
|
No Bayes yet?
I have been running the Bayes learning for several days now. I had to have Admin install the DB on the server. However, I have yet to see any Bayes listed in any of the message headers. Any thoughts? Here is what my cron report looks like:
Learning SPAM Processing /home/avagodro/mail/***.com/stevev/SPAM Learned tokens from 48 message(s) (505 message(s) examined) Processing /home/avagodro/mail/***.com/webmaster/SPAM Learned tokens from 3 message(s) (12 message(s) examined) Processing /home/avagodro/mail/***.com/nella/SPAM Learned tokens from 39 message(s) (228 message(s) examined) Learning HAM Processing /home/avagodro/mail/***.com/stevev/HAM Learned tokens from 0 message(s) (0 message(s) examined) Processing /home/avagodro/mail/***.com/webmaster/HAM Learned tokens from 1 message(s) (5 message(s) examined) Processing /home/avagodro/mail/***.com/nella/HAM Learned tokens from 0 message(s) (0 message(s) examined) Done Also, I have been examining some messages and they don't even show the X-Spam Filter. |
|
|
|
|
|
#96 (permalink) |
|
minor deity
Super #1
Joined in Apr 2004
Lives in Georgia
Hosted on XEON
7,364 posts
Gave thanks: 25
Thanked 94 times
|
you will have to learn from between 500 and 1000 messages before bayes scores start showing in your spam. Looks like the process is working for you so far! Xpam does not mean anything, by the way.
I check my email using a program called HastyMail. It's a web mail program that allows me to see the full "raw" view of the message. Here is an example of one of my recent spams: Code:
Content preview: Dear Home Owner, Your crd. scoring doesn't matter to us.
If you own property and need immediate capital to use any way you want
or simply want to decrease your monthly payments by a third or more,
fill out this uncomplicated, secure 1 min. form for an instant quote. No
sensitive information will be asked on the form [...]
Content analysis details: (7.4 points, 4.5 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5000]
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[200.127.204.41 listed in dnsbl.sorbs.net]
3.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[200.127.204.41 listed in sbl-xbl.spamhaus.org]
------------=_45468112.682408BB
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Received: from [200.127.204.41] (helo=36F87888)
by xeon.dizinc.com with smtp (Exim 4.52)
id 1Gefut-0005aR-0U
for john@stegenga.net; Mon, 30 Oct 2006 17:47:44 -0500
Received: (from AlankndSutherlanden@excite.com@localhost)
by AlankndSutherlanden@excite.com.net MqFx id g42Ls1T0.4228;
Tue, 31 Oct 2006 01:38:27 +0300
Message-Id: <biceps.auditory@g42Ls1T0.18.com>
From: "AlankndSutherlanden@excite.com" <RaphaelvudRosadutj@excite.com>
Date: Tue, 31 Oct 2006 01:39:27 +0300
To: john@stegenga.net
Subject: contractual
X-Mailer: Ximian Evolution
X-Spam-Exim: iiIt8TABS4gOCYYYE49CM0dF
Dear Home Owner,
Your crd. scoring doesn't matter to us. If you own property
and need immediate capital to use any way you want or simply want
to decrease your monthly payments by a third or more,
fill out this uncomplicated, secure 1 min. form for an instant quote.
No sensitive information will be asked on the form
Dont worry about approval, your cr. will not disqualify you
we specialize in all kinds of scores.
that was a low-score spam. This is a high score spam, which Cowboys filter mod helps me ditch more and more of automatically: Code:
Content preview: [...]
Content analysis details: (18.4 points, 4.5 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.1 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
1.1 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry
2.2 INVALID_DATE Invalid Date: header (not RFC 2822)
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.1 HTML_90_100 BODY: Message is 90% to 100% HTML
2.0 BAYES_60 BODY: Bayesian spam probability is 60 to 80%
[score: 0.6358]
1.1 MIME_HTML_MOSTLY BODY: Multipart message mostly text/html MIME
0.2 HTML_MESSAGE BODY: HTML included in message
3.1 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words
2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[213.222.143.33 listed in dnsbl.sorbs.net]
1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?213.222.143.33>]
1.9 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP
[213.222.143.33 listed in combined.njabl.org]
__________________
Proud to be a Surmunity Mod! XEON Make a fundamental difference! My Sites: Curious about Brewing Beer? Join the community! >>>>> Some Change is GOOD! Keep your paycheck! Support the Fair Tax Get into an Art museum Victorian London It's your brain -ON WEB - mybrainhost.com (under development) What SHOULD Government do? Much Less than it Does! |
|
|
|
|
|
#97 (permalink) |
|
Searcher
Surpass Staff
Joined in May 2003
Lives in Orlando
24,692 posts
Gave thanks: 943
Thanked 806 times
|
Hi everyone..
I wanted to ask if anyone here is interested in paying for an extra service for a few dollars a month (no more than $5 I would imagine) for a third party filtering service? I have been thinking about this for a few weeks. There are free tools available to combat spam, but it may be worth it to some to have mail filtered at an outside source before even reaching you. One I have been researching is: http://www.katharion.com
__________________
Follow Surpass on Twitter and Facebook
Check out interesting finds on the Surpass Blog .... it's coming. |
|
|
|
|
|
#98 (permalink) | |
|
Registered User
Fresh Surpasser
Joined in Sep 2003
Lives in Spokane, Washinton
Hosted on SH124
6 posts
Gave thanks: 0
Thanked 1 Time in 1 Post
|
Quote:
It would be something to look at. Sometimes I wish we had a filter like we have at my work. We use PureMessage (http://www.sophos.com/products/es/email/) but the spam has really increased lately. |
|
|
|
|
| This user thanks avagodro for this great post! | Kayla (October 30th, 2006) |
|
|
#99 (permalink) |
|
Searcher
Surpass Staff
Joined in May 2003
Lives in Orlando
24,692 posts
Gave thanks: 943
Thanked 806 times
|
So right now a lot of spam is coming through with PureMessage?
__________________
Follow Surpass on Twitter and Facebook
Check out interesting finds on the Surpass Blog .... it's coming. |
|
|
|
![]() |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | Search this Thread |
| Rate This Thread | |
|
|